← Izenpe S.A. cases
Bugzilla #1598608
Certificate Problem Report
Izenpe: intermediate certificates not revoked within BR time period
RESOLVED
FIXED
Izenpe S.A.
AI Summary
Izenpe S.A. reported an incident involving four intermediate certificates that were not revoked within the required BR time period. The issue was identified following a note from Ryan Sleevi regarding another bug, leading Izenpe to create an incident report. The CA initially revoked three of the seven problematic certificates but delayed revocation of the remaining four due to potential impacts on citizens and entities relying on those certificates. Ultimately, all pending subCAs were revoked by November 29, 2019, and Izenpe has since implemented measures to ensure timely revocation in the future.
Chronology
- First incident reported regarding intermediate certificates not listed in audit reports.
- Incident report created and three of seven certificates revoked.
- All pending subCAs revoked.
- New application to manage web certificates put into production.
Participants
Oscar Garcia
Ryan Sleevi
External References
Similar Local Cases
Izenpe: Failure to revoke within 5 days
Izenpe: Intermediate CA certificates not listed in audit report
Izenpe: Failure to provide a preliminary report within 24 hours.
Izenpe: Multiple sub CAs with incorrectly encoded SubjectPublicKeyInfo algorithm
Izenpe: Certificates not disclosed in CCADB
Izenpe: Not allowed Qualifier ID OID on Certificate Policies extension of Precertificates
Buypass: intermediate certificates not revoked within BR time period
IZENPE: Failed to respond a Certificate Problem Report within 24 hours and create a preliminary report in 72 hours